← Back

Debian Linux

debian_linux

Vendor: Debian • 10,013 CVEs

CVEs (10,013)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).
7Apple
DebianF5+4 more
23Big Ip Access Policy Manager
Big Ip Advanced Firewall ManagerBig Ip Analytics+20 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.0 HIGH· v3
5.1 MEDIUM· v2
The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().
7Apple
DebianF5+4 more
23Big Ip Access Policy Manager
Big Ip Advanced Firewall ManagerBig Ip Analytics+20 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Dec 17, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167.
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().
6Debian
FasterxmlFedoraproject+3 more
26Active Iq Unified Manager
Banking PlatformCommunications Billing And Revenue Management+23 more
Oct 7, 2026
Oct 1, 2019
N/A· v4
9.8 CRITICAL· v3
6.8 MEDIUM· v2
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the se...Show more
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of com.p6spy.engine.spy.P6DataSource mishandling.Show less
6Debian
FasterxmlFedoraproject+3 more
28Active Iq Unified Manager
Banking PlatformCommunications Billing And Revenue Management+25 more
Oct 8, 2026
Oct 1, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the se...Show more
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.Show less
6Canonical
DebianFedoraproject+3 more
8Debian Linux
Enterprise Linux DesktopEnterprise Linux Server+5 more
Jun 17, 2026
Oct 1, 2019
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2...Show more
base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.Show less
4Canonical
DebianFedoraproject+1 more
4Debian Linux
FedoraLinux Kernel+1 more
Jun 17, 2026
Oct 1, 2019
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
ax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768.
6Debian
FedoraprojectGolang+3 more
9Cloud Insights Telegraf Agent
Debian LinuxDeveloper Tools+6 more
Jun 17, 2026
Sep 30, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.
2Debian
Phpbb
2Debian Linux
Phpbb
Jun 17, 2026
Sep 30, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In phpBB before 3.1.7-PL1, includes/acp/acp_bbcodes.php has improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack is possible if an attacker also manages to r...Show more
In phpBB before 3.1.7-PL1, includes/acp/acp_bbcodes.php has improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack is possible if an attacker also manages to retrieve the session id of a reauthenticated administrator prior to targeting them.Show less
3Canonical
DebianPython
3Debian Linux
PythonUbuntu Linux
Oct 7, 2026
Sep 28, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py i...Show more
The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server.Show less